CVE-2012-4409

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

CVE-2012-4426

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

CVE-2012-4426

MCrypt before and including version 2.6.8 contains multiple format-string vulnerabilities (CVE-2012-4426) that may allow a remote attacker to cause a crash or possibly execute arbitrary code via errors.c or mcrypt.c. The issue is documented across multiple sources (NVD, Debian/Ubuntu advisories, ...

CVE-2012-4426

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

CVE-2012-4527

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

PT-2012-5393

Name of the Vulnerable Software and Affected Versions mcrypt versions 2.6.8 and earlier Description The issue involves multiple format string vulnerabilities that could allow user-assisted remote attackers to cause a denial of service or possibly execute arbitrary code. This is related to errors ...

PT-2012-5460 · Mcrypt · Mcrypt

Name of the Vulnerable Software and Affected Versions: mcrypt versions 2.6.8 and earlier Description: The issue allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. It is not clear whether this is a vulnerability...

CVE-2012-4527: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to cause a denial of service crash and possibly execute arbitrary code via a long file name. NOTE: it is not clear whether this is a vulnerability...

CVE-2012-4409: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the checkfilehead function in extra.c in mcrypt 2.6.8 and earlier allows user-assisted remote attackers to execute arbitrary code via an encrypted file with a crafted header containing long salt data that is not properly handled during decryption...

PT-2012-5382

Name of the Vulnerable Software and Affected Versions mcrypt versions 2.6.8 and earlier Description The issue is related to a stack-based buffer overflow in the check file head function, which can be exploited by user-assisted remote attackers. This can happen when an encrypted file with a crafte...

CVE-2012-4426: Use of Externally-Controlled Format String

Multiple format string vulnerabilities in mcrypt 2.6.8 and earlier might allow user-assisted remote attackers to cause a denial of service crash or possibly execute arbitrary code via vectors involving 1 errors.c or 2 mcrypt.c...

Fedora Update for mcrypt FEDORA-2012-17318

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-17318 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for mcrypt FEDORA-2012-17290

Check for the Version of mcrypt OpenVAS Vulnerability Test Fedora Update for mcrypt FEDORA-2012-17290 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Fedora Update for mcrypt FEDORA-2012-17318

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora Update for mcrypt FEDORA-2012-17290

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

[SECURITY] Fedora 18 Update: mcrypt-2.6.8-10.fc18

MCrypt is a replacement for the old crypt package and crypt1 command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers...

[SECURITY] Fedora 17 Update: mcrypt-2.6.8-10.fc17

MCrypt is a replacement for the old crypt package and crypt1 command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers...

[SECURITY] Fedora 16 Update: mcrypt-2.6.8-10.fc16

MCrypt is a replacement for the old crypt package and crypt1 command, with extensions. It allows developers to use a wide range of encryption functions, without making drastic changes to their code. It allows users to encrypt files or data streams without having to be cryptographers...

Fedora 17 : mcrypt-2.6.8-10.fc17 (2012-17290)

Apply workaround for CVE-2012-4527. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...

Fedora 18 : mcrypt-2.6.8-10.fc18 (2012-17339)

Apply workaround for CVE-2012-4527. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL 7030...